Ramp 2FA: how to set up an authenticator app

Ramp is the corporate card and spend management platform many companies use for cards, bills and expenses. If you have a Ramp login, you already use multi-factor authentication (MFA): Ramp sends a code by text, voice call, WhatsApp or email, and your company can't switch MFA off. An authenticator app is the method Ramp ranks most secure and recommends as your main one (Ramp). This guide adds one using Authenticator App - Novaz on iPhone. Any authenticator app works the same way.

How we checked this guide: the Ramp steps come from Ramp's own Help Center articles, linked below, which we read on October 21, 2026. We haven't tested them on a Ramp account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Add an authenticator app

Each person sets this up in their own settings, not in company settings. Ramp lets you register up to 5 authenticator apps on one account (Ramp).

1. Sign in to Ramp on the web and go to Settings > Personal Settings > Security. Ramp's MFA overview also links straight to the authenticator app settings.
2. Click Set up authenticator. If you already have one, click Add authenticator instead. Ramp's recovery article reaches the same place through Configure an authenticator app, so the wording may differ on your screen (Ramp).
3. Ramp shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If Ramp is open on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
4. Follow Ramp's on-screen prompts and type the current code from Novaz to confirm.

Ramp's setup steps only mention the QR code. Its recovery flow mentions a "manual key" as an alternative, without naming the link or showing it. If you do get a key, tap + in Novaz, then Enter key manually, and type it as the Setup key. Ramp says its codes are 6 digits and refresh every 30 seconds, which matches what Novaz uses for typed keys (Ramp). More in What is a 2FA setup key?

No backup codes

Ramp's help articles don't mention backup or recovery codes. The fallback is your other methods: the phone number and email on your Ramp profile. Ramp suggests keeping a second method alongside the authenticator for that reason (Ramp). Without a Novaz backup, its keys exist only on your iPhone, so check that your phone number in Ramp is current.

When Ramp asks for a code

• Password sign-in: always on a new or untrusted device. Checking Trust this device? on the code screen cuts the prompts for a while. A password change can reset that trust.
• Passkey sign-in: no MFA step at sign-in.
• SAML SSO: no Ramp code; your company's identity provider handles any MFA.
• Sign in with Google: sometimes, depending on account activity.
• Sensitive actions, such as viewing payment details or changing settings: Ramp asks again even if you're signed in, and trusting the device doesn't skip it.

All of this is from Ramp's MFA overview (Ramp). If your company turned on strict MFA, the verification screen may offer fewer fallback methods.

If Ramp rejects your code

Too many wrong codes lock you out for a few minutes, Ramp says, so wait and then try a fresh code (Ramp). If you have several authenticators registered, make sure you're reading the right Ramp entry. The most common cause is the iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?

Changing phones

Because Ramp allows several authenticators, you can do this cleanly while you still have the old phone (Ramp):

1. In Settings > Personal Settings > Security, open the authenticator settings and click Add authenticator.
2. Scan the new QR code with Novaz on the new iPhone and confirm the code.
3. Back on the same screen, click the trash icon labeled Remove authenticator next to the old one.
4. Delete the Ramp entry from the old phone. In Novaz, open it and tap Remove account.

If you keep a Novaz iCloud backup or backup file, you can skip these steps: restore it on the new iPhone and the Ramp entry comes with it. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Ramp's recovery article lists these routes, in order (Ramp):

1. Phone instead: if a phone number is on file, choose text, voice call or WhatsApp on the code screen.
2. Ask your admin: where offered, Get help from your admin sends an MFA removal request for approval. Admins can't reset MFA or remove authenticators directly.
3. Self-service: on the code screen, tap Having trouble? and select I can't find an authenticator app code on my phone. Ramp emails a link, lists your registered authenticators so you can check each, then sends you to identity verification with Onfido. You'll need a government photo ID such as a passport or driver's license. Ramp says this usually takes a few minutes, longer if a manual review is needed. After that, you set up a new authenticator.

Self-service recovery is limited to 3 attempts in 7 days and only works if password sign-in is enabled for your account. Recovery adds the new authenticator but doesn't remove the old one, so remove it once you're back in. If nothing works, contact Ramp Support (Ramp). More in Lost the phone with your authenticator app?

Removing the authenticator

You can delete an authenticator with the Remove authenticator trash icon in the same settings. That doesn't turn MFA off. Ramp's help says MFA itself can't be disabled, and phone and email stay on its list of methods (Ramp).

Official Ramp help

• Multi-factor authentication (MFA) overview
• Recover or update your MFA method
• Troubleshooting Ramp login & MFA issues